This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/WahD60c8L22Ycb_BALwXUk0StuA.roa File: WahD60c8L22Ycb_BALwXUk0StuA.roa (raw, json) Hash identifier: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU= Subject key identifier: 59:A8:43:EB:47:3C:2F:6D:98:71:BF:C1:00:BC:17:52:4D:12:B6:E0 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E7A95AEA2DC5FF14FDDA29DE1BAD Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/WahD60c8L22Ycb_BALwXUk0StuA.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50606 IP address blocks: 93.105.88.0/22 maxlen: 22 95.160.58.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e7:a9:5a:ea:2d:c5:ff:14:fd:da:29:de:1b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59a843eb473c2f6d9871bfc100bc17524d12b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:50:47:c4:9a:e4:25:3b:70:9a:5b:8c:b2: ce:0f:2f:d1:fb:48:03:e7:66:ab:9b:a8:98:eb:2a: f2:ae:98:e3:67:18:87:24:7f:51:30:4a:c9:fd:08: c2:2c:b9:d9:06:8a:96:30:92:9a:01:35:5e:23:c8: 95:0d:48:6c:98:ee:4c:79:05:8c:4d:0f:77:45:de: 22:64:f1:b6:e4:7d:cb:ae:ba:d0:f3:a0:86:18:86: 6a:ec:a0:5a:37:e9:5c:26:d7:79:d0:c3:55:92:71: c3:07:1a:19:7e:91:04:ff:73:91:60:4f:9c:70:3f: 47:44:41:3d:44:b9:fe:8c:85:35:03:1d:ab:26:dd: f6:e6:8b:1f:ef:4b:67:25:cc:f8:3a:ea:07:d7:69: 55:77:0a:4c:e3:8e:97:0b:ae:76:72:a3:89:d7:a9: 9c:7d:97:a2:00:48:db:b2:ad:7f:33:51:5d:86:f1: 07:91:97:57:8f:58:71:a7:54:fa:d4:26:b2:38:d8: a8:8d:1a:9e:b5:48:14:93:12:c9:d7:94:ae:ae:a7: e7:2c:ac:ac:6f:3e:4f:12:d8:cc:55:ec:9e:61:14: 35:5b:05:0b:35:53:bb:ea:78:ed:8c:70:e1:39:93: cb:c0:ff:e1:04:2e:95:66:75:49:dd:53:dd:3f:03: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:43:EB:47:3C:2F:6D:98:71:BF:C1:00:BC:17:52:4D:12:B6:E0 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/WahD60c8L22Ycb_BALwXUk0StuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.105.88.0/22 95.160.58.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ad:6b:29:7b:05:b4:32:d9:08:88:9e:3d:57:65:7b:70:f8: 86:6c:e8:28:92:b2:a5:29:94:9b:e0:78:0c:4c:11:e1:87:6c: 71:53:18:6f:1f:17:55:11:a1:7f:56:03:03:2f:36:8d:2c:dc: b5:71:db:fa:20:c3:fe:f1:4e:5b:43:b5:f5:63:67:ce:b2:95: d6:ef:b7:85:02:3e:b5:b4:a5:c8:71:91:66:4c:44:8c:d7:06: 06:02:a1:d3:b3:40:bd:51:ea:3f:0e:60:00:d9:58:50:d8:2d: 28:af:96:3c:40:43:06:0c:f6:f7:d9:bb:11:66:10:15:45:8f: 9a:87:97:2b:3e:cd:b7:df:ad:4a:50:0f:d8:a2:bd:2d:ea:65: 6c:05:f8:2e:e5:ad:10:2a:84:9c:43:a2:02:9f:85:da:66:28: ee:43:23:d2:35:d0:37:b1:ab:cc:1a:1d:61:0a:39:ee:0e:62: ff:43:91:65:5a:b4:a6:96:fa:6c:2c:37:6b:2e:e4:5e:ad:a6: 67:46:18:7e:a9:f6:45:90:05:7d:1c:07:6c:56:15:10:11:cf: 5d:5b:1a:cb:ef:90:fc:9c:a5:15:53:41:e8:57:45:ac:6c:5b: 72:7b:40:2f:db:d9:73:94:2f:c8:55:7c:34:75:a4:cc:0d:f8: 12:91:4e:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g+epWuotxf8U/dop3hutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWE4NDNlYjQ3M2MyZjZkOTg3MWJmYzEwMGJjMTc1MjRkMTJiNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxklQR8Sa5CU7cJpbjLLODy/R+0gD 52arm6iY6yryrpjjZxiHJH9RMErJ/QjCLLnZBoqWMJKaATVeI8iVDUhsmO5MeQWM TQ93Rd4iZPG25H3LrrrQ86CGGIZq7KBaN+lcJtd50MNVknHDBxoZfpEE/3ORYE+c cD9HREE9RLn+jIU1Ax2rJt325osf70tnJcz4OuoH12lVdwpM446XC652cqOJ16mc fZeiAEjbsq1/M1FdhvEHkZdXj1hxp1T61CayONiojRqetUgUkxLJ15SurqfnLKys bz5PEtjMVeyeYRQ1WwULNVO76njtjHDhOZPLwP/hBC6VZnVJ3VPdPwN/DQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFmoQ+tHPC9tmHG/wQC8F1JNErbgMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvV2FoRDYwYzhMMjJZY2JfQkFMd1hVazBTdHVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXWlYAwQA X6A6MA0GCSqGSIb3DQEBCwUAA4IBAQBvrWspewW0MtkIiJ49V2V7cPiGbOgokrKl KZSb4HgMTBHhh2xxUxhvHxdVEaF/VgMDLzaNLNy1cdv6IMP+8U5bQ7X1Y2fOspXW 77eFAj61tKXIcZFmTESM1wYGAqHTs0C9Ueo/DmAA2VhQ2C0or5Y8QEMGDPb32bsR ZhAVRY+ah5crPs23361KUA/Yor0t6mVsBfgu5a0QKoScQ6ICn4XaZijuQyPSNdA3 savMGh1hCjnuDmL/Q5FlWrSmlvpsLDdrLuReraZnRhh+qfZFkAV9HAdsVhUQEc9d WxrL75D8nKUVU0HoV0WsbFtye0Av29lzlC/IVXw0daTMDfgSkU7X -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:47 2026 by rpki-client